- Added `pyyaml>=6.0.3` dependency constraint to pyproject.toml after
aiohttp to prevent installation of vulnerable older versions with known
YAML parsing security issues.
- Updated uv.lock package dependencies and requires-dist to include pyyaml
entry with specifier '>=6.0.3'.
- Added changelog Security section entry under [Unreleased] documenting the
upgrade for issue #9055.
- Updated CONTRIBUTORS.md with contribution note (PR #9244).
- Added BDD test scenario verifying PyYAML security dependency constraint.
ISSUES CLOSED: #9055